toxssin

toxssin Purpose toxssin is an open-source penetration testing tool that automates the process of exploiting Cross-Site Scripting XSS vulnerabilities. It consists of an https server that works as an interpreter for the traffic generated by the malicious JavaScript payload that powers this tool...

system_bt_AOSP10_r33_CVE-2021-0589

Fluoride 蓝牙协议栈 在 AOSP 上构建与运行 直接构建 AOSP – Fluoride 默认包含在其中。 在 Linux 上构建与运行 适用于 Ubuntu 的说明，已在 14.04（Clang 3.5.0）和 16.10（Clang 3.8.0）上测试通过 下载源码 root@kitploit: mkdir /fluoride cd /fluoride git clone https://android.googlesource.com/platform/system/bt 安装依赖（需要 sudo 权限）： root@kitploit: cd /fluoride/bt...

ncrack

ncrack Ncrack is a high-speed network authentication cracking tool. It was built to help companies secure their networks by proactively testing all their hosts and networking devices for poor passwords. Security professionals also rely on Ncrack when auditing their clients. Ncrack was designed...

kernel-hardening-checker

kernel-hardening-checker （原名 kconfig-hardened-check） 动机 Linux 内核拥有大量安全加固选项。大多数主流发行版并未启用其中的许多选项。我们必须自行启用这些选项，以使我们的系统更加安全。 但没人喜欢手动检查配置。所以让计算机来完成它们的工作吧！ kernel-hardening-checker （原名 kconfig-hardened-check ）是一款用于检查 Linux 内核安全加固选项的工具。 许可证：GPL-3.0。 仓库...

LID

██╗ ██╗██████╗ ██║ ██║██╔══██╗ ██║ ██║██║ ██║ ██║ ██║██║ ██║ ███████╗██║██████╔╝ ╚══════╝╚═╝╚═════╝ Linux Integrity Drift — "Linux está muriendo" — Descubrimiento sistemático de rutas de código del kernel que omiten las garantías de seguridad de LSM La puerta nunca fue derribada. Simplemente la...

wappalyzer-next

Wappalyzer Next This project is a command line tool and python library that uses the Wappalyzer browser extension and its fingerprints to detect technologies. Other projects that emerged after the discontinuation of the official open-source project are using outdated fingerprints and lack accurac...

ngrep

ngrep 1.49.0 2.7.2026 ngrep es como GNU grep aplicado a la capa de red. Es una herramienta basada en PCAP que permite especificar una expresión regular extendida o hexadecimal para comparar con las cargas útiles de datos de los paquetes. Comprende muchos tipos de protocolos, incluidos IPv4/6, TCP...

ICMP-Ghost-A-Fileless-x64-Assembly-C2-Agent

root@kitploit: |\ |\ |\ |\ |\ |\ \ |\ |\ \ \ \ | \ \ \\ \ \ |\ \ \ || \ | \ \ |||\ \ \ \ \ \ \ \ \ \\ \ \ \ \ \ \ \ \ \ \ \ \ \ |\ \ \ \ \ \ \ \\ ||\ \ \ \ \ \ \ |\ \ \ \ \ \ \ \\ \ \ \ \ \\ ||||||||\ || ||| || Implante C2 sin archivos, en ensamblador x64 puro,...

algo

Algo VPN Algo VPN is a set of Ansible scripts that simplify the setup of a personal WireGuard and IPsec VPN. It uses the most secure defaults available and works with common cloud providers. See our release announcement for more information. Features Supports only IKEv2 with strong crypto AES-GCM...

CVE-Requests-1896609

Solicitudes CVE 1896609 - feiskyer/mcp-kubernetes-server Resumen Ejecutivo Este informe detalla dos vulnerabilidades de seguridad críticas descubiertas en el paquete feiskyer/mcp-kubernetes-server. Cuando se despliega, el servidor expone una herramienta MCP llamada kubectl que está diseñada para...

CVE-2022-1292

CVE-2022-1292 POC Descripción root@kitploit: The crehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute...

cred_scanner

credscanner A simple command line tool for finding AWS credentials in files. Optimized for use with Jenkins and other CI systems. I suspect there are other, better tools out there such as git-secrets, but I couldn't find anything to run a quick and dirty scan that also integrates well with Jenkin...

android-backup-extractor

Android 备份提取器 用于提取和重新打包通过 adb backup（ICS+）创建的 Android 备份的工具。 主要基于 AOSP 中的 BackupManagerService.java。 构建 需要 Java 11。处理加密备份需要 JCE 无限强度管辖策略（如果使用当前 Java 9 版本则不需要）。 http://www.oracle.com/technetwork/java/javase/downloads/jce-7-download-432124.html 使用下面列出的工具之一进行构建，或者参见发布版以获取预构建的二进制文件（可运行的 jar 文件）。 使用...

CVE-2017-1000117-test

How it works This operates using the CVE-2017-1000117 vulnerability. When you clone this repository with root privileges using the git command with the --recurse option, an HTTP server that listens on port 12345 will run automatically. To stop the HTTP server, find its process ID and kill it...

CVE-2022-22954

CVE-2022-22954 PoC RCE en VMware Workspace ONE Access e Identity Manager mediante SSTI. CVE-2022-22954 - PoC SSTI Uso: root@kitploit: CVE-2022-22954.py -h -m SETMODE -i IP -c CMD optional arguments: -h, --help show this help message and exit -m SETMODE, --mode SETMODE Available modes: shodan | fi...

freeipa

FreeIPA Server FreeIPA allows Linux administrators to centrally manage identity, authentication and access control aspects of Linux and UNIX systems by providing simple to install and use command line and web based management tools. FreeIPA is built on top of well known Open Source components and...

openssl

Welcome to the OpenSSL Project OpenSSL is a robust, commercial-grade, full-featured Open Source Toolkit for the Transport Layer Security TLS, formerly SSL, Datagram TLS DTLS, and QUIC protocols. The protocol implementations are based on a full-strength general purpose cryptographic library, which...

MCPDebugger

Fatmike 的 MCP 调试器服务器 简介 该项目是一个自制的轻量级 MCP 调试器服务器 ，用于学习和实验。MCP 调试器服务器 将调试器功能暴露为 MCP 工具，使外部 MCP 客户端能够通过简洁的接口控制执行、检查内存和分析被调试程序。 调试器使用 C++ 编写，从头实现了核心调试功能，不依赖现有的调试器框架。指令解码使用了 Zydis 反汇编器。调试器与一个使用 C 编写的 MCP 服务器集成，该服务器基于官方 MCP C SDK 构建。 关键词 ： MCP server, debugger, disassembler, 静态分析, 动态分析, 调试, AI, EXE,...

mariadb-13-rce-lab

Laboratorio de RCE MariaDB 13.0.1-rc Ejecución remota de código en la imagen Docker estándar sin modificar de MariaDB 13.0.1-rc como uid 999 mysql. Dos variantes de exploit: Variante| Archivo| Requisitos| Notas ---|---|---|--- SQL puro recomendado| exploitpuresql.py| una cuenta MariaDB de bajos...

PoC-CVE-2026-21858

PoC-CVE-2026-21858 n8n es una plataforma de automatización de flujos de trabajo de código abierto. Las versiones desde la 1.65.0 hasta la 1.121.0 permiten a un atacante acceder a archivos en el servidor subyacente mediante la ejecución de ciertos flujos de trabajo basados en formularios. Un flujo...